Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: Tq6haW97fMAMCW9VuxNcOsuUXrPtDNosS45j28Pgzqw=
Subject key identifier: DA:0C:4D:FA:AE:9F:45:F0:E4:EE:ED:BA:32:09:B7:FE:3D:6E:BD:45
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019E90CAB21070BA6A713CBAE75764BE0990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 1652
Signing time: Thu 04 Jun 2026 04:01:03 +0000
Manifest this update: Thu 04 Jun 2026 04:01:03 +0000
Manifest next update: Fri 05 Jun 2026 04:01:03 +0000
Files and hashes: 1: 1-zgZS_oWFjeb_FUaP5rf7CIay9s.roa (hash: oe0GxzRMGYrpk5fK7HR9K3weYFmW/xstDWDPAgUmAy8=)
2: W79nBKhPAzEIedXVT5rNtMV1yOo.roa (hash: mixrNOg93KKzgb3tWB4Qt/opKcOsyCnIL17ZEqCbhik=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: vJECGtcWUCc8/TrVVOD50K2gsD3hqW8ERDJuUZpKxe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:ca:b2:10:70:ba:6a:71:3c:ba:e7:57:64:be:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jun 4 04:01:03 2026 GMT
Not After : Jun 5 04:01:03 2026 GMT
Subject: CN=da0c4dfaae9f45f0e4eeedba3209b7fe3d6ebd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:cc:85:4a:f5:95:62:af:3c:70:da:57:46:
8a:45:ce:24:e7:9f:9a:12:c6:43:a5:47:c2:d4:95:
f1:c8:d7:90:7c:a4:ac:d0:6d:3e:a0:26:6a:64:c4:
49:8c:d4:49:bb:32:e0:d3:84:c2:04:31:17:6a:28:
ec:30:e4:1b:df:c5:e3:a1:f9:28:2b:48:39:41:ba:
f0:10:e7:7d:ef:ef:99:f7:cb:ca:d7:ec:a7:d7:fa:
1c:c6:bd:38:87:2b:1f:de:6c:3a:73:f7:38:0b:57:
91:97:1e:a8:bc:1f:b1:4b:35:8b:2f:8c:c6:83:e1:
2a:ac:51:a3:8f:fb:c3:8f:72:c6:6d:02:c9:1c:ed:
ab:4c:f4:97:c4:c3:0e:05:d1:e2:56:78:6b:40:15:
5b:49:7d:e2:a4:3f:aa:64:26:13:ae:e6:95:92:85:
f3:b4:b6:ef:ec:1c:5c:e8:e2:f0:1e:97:17:ac:2c:
92:df:a9:14:9a:ce:3a:7a:c8:0b:40:9d:95:4f:bb:
5b:97:9e:c1:23:55:0c:7c:39:e9:1d:7f:a8:d0:84:
83:e6:d8:1a:f6:82:ee:4a:10:98:ee:7c:31:8d:d3:
12:af:69:aa:75:5e:e0:9b:55:75:c9:17:14:bb:06:
a3:b1:ab:c4:88:d9:1d:33:e3:5d:d4:c2:f6:3a:bf:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:4D:FA:AE:9F:45:F0:E4:EE:ED:BA:32:09:B7:FE:3D:6E:BD:45
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:80:d9:dd:c5:44:1f:ea:2c:a3:a3:f1:24:c3:f9:55:c4:35:
e3:13:08:6a:29:e2:ed:76:78:a0:0a:3a:46:16:0c:30:de:1d:
7f:dc:a0:cf:da:5b:45:de:0b:20:4a:e9:da:1c:b1:2a:ea:de:
22:bf:db:0f:96:6e:8d:f7:67:d7:d2:7e:3d:81:61:96:af:28:
21:19:69:70:b8:d6:54:75:76:45:df:f8:94:68:51:4e:71:60:
c1:b9:9b:5b:28:08:79:dc:47:d1:14:32:c5:34:fe:87:90:5b:
3b:14:d3:36:67:e9:38:dc:52:10:18:bc:fa:19:97:7e:23:c0:
4b:48:2b:fa:6a:d9:4e:f5:86:d1:d0:97:22:cc:f4:8d:c7:eb:
49:02:b8:80:2e:68:1a:50:3b:ce:26:ca:6c:e2:d5:05:3b:c2:
49:5b:54:53:14:7b:1c:db:e4:6a:39:3e:06:1e:d3:fc:18:98:
25:34:e0:02:ee:de:4d:c0:24:0d:8e:b5:15:df:69:de:1c:79:
f3:2f:2c:c3:f6:85:c3:21:58:44:b5:cc:29:9f:bf:22:a0:da:
ba:32:82:e6:ed:54:30:22:d1:b4:3e:d1:26:f4:f0:9f:a3:12:
e8:35:19:00:89:cb:ac:7a:60:08:10:41:ed:8a:a8:b5:ea:24:
8c:43:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:49 2026 by rpki-client